Cisco Technology, Inc.

Richard Lam

Shyam N Kapadia

Lukas Krattiger

Liqin Dong

Neeraj Malhotra

Uffaz Nathaniel

Elyor Khakimov

Wing Hon Yeung

A network controller for a network implementing a virtual network overlay determines a network gateway via which a service appliance accesses the network. The network controller determines a network gateway via which an application server accesses the network. First policy data is distributed to the network gateway via which the service appliance accesses the network. This first policy data indicates that the network gateway via which the service appliance accesses the network forwards return packets addressed to a client device sent from an application server to the service appliance. Second policy data is distributed to the network gateway via which the application server accesses the network. This second policy data indicates the network gateway via which the application server accesses the network is configured to forward return packets addressed to the client device to the network gateway via which the service appliance accesses the network.

Integrating service appliances without source network address translation in networks with logical overlays

Presented herein are techniques for actively monitoring, at a network controller, a network location of an endpoint connected to the network based on control plane updates. The network controller is configured to archive the network location of the endpoint, along with local information for the endpoint, in an endpoint tracking database of the network controller.

Endpoint location tracking

Presented herein are methods for advertising an IP prefix to address the connectivity problem in multi-chassis link aggregation scenario. A peer switch will advertise two VTEP addresses. It will use a physical IP (PIP) address as a next hop (NH) for a prefix route, while continuing to use a VIP for host IP and MAC route advertisement. A new virtual MAC is introduced and it is derived from the VIP as the router MAC associated with VIP. A switch is made to use a VIP for prefix advertisement when a device detects that the same prefix is reachable both locally and from its peer. This saves adjacency entries consumed in the remote VTEPs. These techniques fix the connectivity issue for prefix routes that is exposed with current EVPN, without requiring any additional adjacency resource consumption.

Optimizing EVPN for data centers with redundant top-of-rack deployments

Growing community of inventors

Cupertino, CA, United States of America

Richard Lam